Overflow Venerability

[SyntaXmasteR]

Here is the site: http://www.americansupersports.com/shuffleboard-tables/champion-shuffleboard/Champion-Grand-Champion-Shuffleboard-Table-16.html

When you add 10000000000 of this item to your cart it creates this error:


Server Error in '/cart' Application.
--------------------------------------------------------------------------------

Arithmetic operation resulted in an overflow.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.OverflowException: Arithmetic operation resulted in an overflow.

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:


[OverflowException: Arithmetic operation resulted in an overflow.]
Microsoft.VisualBasic.CompilerServices.IntegerType.FromString(String Value) +109
Microsoft.VisualBasic.CompilerServices.IntegerType.FromObject(Object Value) +749
CoolCart.Cart._CalculateTotals() +4813
CoolCart.Cart._ProcessCart() +872
CoolCart.Cart.Page_Load(Object sender, EventArgs e) +11770
System.Web.UI.Control.OnLoad(EventArgs e) +67
System.Web.UI.Control.LoadRecursive() +35
System.Web.UI.Page.ProcessRequestMain() +731




--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:1.1.4322.573; ASP.NET Version:1.1.4322.573


Does this mean that there is a venerability? If so where can i read up on exploiting this type of venerability.

[Unregistered]

In a buffer overflow exploit, which I'm not sure this qualifies for to be honest, think of the buffer as a cup. The code is more than the cup can hold, with everything after the cup's worth of code being the code you want to be executed.

[SyntaXmasteR]

Never thought of it like that, thanks man~ You have any URLs that simplify it as much as you did? I would like to read up on it

[Unregistered]

Writing Buffer Overflow Exploits - a Tutorial for Beginners by Mixter:

http://www.securiteam.com/securityreviews/5OP0B006UQ.html

A very nice article that targets people with some experience writing C.


A buffer overflow that targets Ethereal:

http://www.securiteam.com/exploits/5BP0D00FPI.html

Googling "buffer overflow exploit" will give you plenty of examples.